OpenSSF Scorecard integration

[marcransome]

OpenSSF Scorecard workflows have been added to all fish-shop GitHub Actions projects and should serve as a benchmark for maintaining security best practice. Badges will be added to the repositories at a later date.

OpenSSF Scorecard Reports

Direct links to OpenSSF Scorecard Reports for each project and current scores as of this writing:

Project	OpenSSF Scorecard report	GitHub Actions Workflow	Current score
fish-shop/install-fish-shell	report	workflow	8.4
fish-shop/install-plugin	report	workflow	8.4
fish-shop/install-plugin-manager	report	workflow	7.7
fish-shop/syntax-check	report	workflow	8.4
fish-shop/run-fishtape-tests	report	workflow	8.4
fish-shop/indent-check	report	workflow	6.9

Important

The above scores are provided as an indicator only. They are liable to change over time. Refer to the reports or workflow runs for the latest available scores.

---

Updates (13/11/2024):

• Updated listed scores
• Added fish-shop/indent-check action

[marcransome]

OpenSSF Scorecard badges have been added to the README.md files for all custom GitHub Actions projects. 🥳